Critical Flaw in Oracle Identity Manager Under Active Exploitation

Hipaajournal •Steve Alder • November 24, 2025

A critical vulnerability in Oracle Identity Manager is under active exploitation, according to the U.S. Cybersecurity and Infrastructure Security Agency […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Warns of Active Exploitation of Oracle Identity Manager Vulnerability CVE-2025-61757 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a critical vulnerability in Oracle Identity Manager, tracked as CVE-2025-61757, is being actively exploited in the wild. This flaw allows unauthenticated remote code execution and has a CVSS score of 9.8, indicating severe risk to affected systems. CISA has urged immediate patching by federal agencies and private sector operators. 31 sources 51

Extracted Entities

Platforms (1)

Oracle Identity Manager